Sign in with
Sign up | Sign in
Your question

Password Policy

Last response: in Windows 2000/NT
Share
December 1, 2004 11:43:40 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

in a W2K domain, I have a xp client. If I set my password policy at
the domain gpo and my local gpo, what policy gets picked up if I log
on with a local user at the xp client?

More about : password policy

Anonymous
December 1, 2004 2:52:15 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

The domain policy applies to the domain user accounts. If you create a
password policy on an OU, the local computer's user accounts will be
affected by the OU policy

Ken


"Pat" <nobody@nobody.com> wrote in message
news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
> in a W2K domain, I have a xp client. If I set my password policy at
> the domain gpo and my local gpo, what policy gets picked up if I log
> on with a local user at the xp client?
Anonymous
December 1, 2004 2:52:50 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

.... as a follow up to what I just posted, if you have a domain, you
shouldn't be using local accounts--that defeats the purpose of the domain.

Ken


"Pat" <nobody@nobody.com> wrote in message
news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
> in a W2K domain, I have a xp client. If I set my password policy at
> the domain gpo and my local gpo, what policy gets picked up if I log
> on with a local user at the xp client?
Related resources
December 1, 2004 9:49:28 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

can you tell me if I log in to the local domain with a local user,
what password policy would apply?
On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:

>... as a follow up to what I just posted, if you have a domain, you
>shouldn't be using local accounts--that defeats the purpose of the domain.
>
>Ken
>
>
>"Pat" <nobody@nobody.com> wrote in message
>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>> in a W2K domain, I have a xp client. If I set my password policy at
>> the domain gpo and my local gpo, what policy gets picked up if I log
>> on with a local user at the xp client?
>
Anonymous
December 2, 2004 12:10:12 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I don't think it's possible to log into a domain with an account that's
'homed' on a local computer. You would need to log into the domain using a
domain user account.

Ken


"Pat" <nobody@nobody.com> wrote in message
news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
> can you tell me if I log in to the local domain with a local user,
> what password policy would apply?
> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>
>>... as a follow up to what I just posted, if you have a domain, you
>>shouldn't be using local accounts--that defeats the purpose of the domain.
>>
>>Ken
>>
>>
>>"Pat" <nobody@nobody.com> wrote in message
>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>> in a W2K domain, I have a xp client. If I set my password policy at
>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>> on with a local user at the xp client?
>>
>
December 2, 2004 4:48:33 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

If I create a local user on the local domain on the local pc and logon
to that after logging on with a user from my company domain. what
password policy would apply , the local or the company?

thanks

On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:

>I don't think it's possible to log into a domain with an account that's
>'homed' on a local computer. You would need to log into the domain using a
>domain user account.
>
>Ken
>
>
>"Pat" <nobody@nobody.com> wrote in message
>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>> can you tell me if I log in to the local domain with a local user,
>> what password policy would apply?
>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>>
>>>... as a follow up to what I just posted, if you have a domain, you
>>>shouldn't be using local accounts--that defeats the purpose of the domain.
>>>
>>>Ken
>>>
>>>
>>>"Pat" <nobody@nobody.com> wrote in message
>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>> in a W2K domain, I have a xp client. If I set my password policy at
>>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>>> on with a local user at the xp client?
>>>
>>
>
Anonymous
December 2, 2004 10:29:37 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Pat.

It depends what is the "effective" policy on the computer which will apply
to local user accounts. You can open Local Security Policy to see what it
reports noting that for Windows 2000 you need to look at the "effective"
settings. I think if you run the "net accounts" command on the computer it
will also display the account settings. --- Steve


"Pat" <nobody@nobody.com> wrote in message
news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
> If I create a local user on the local domain on the local pc and logon
> to that after logging on with a user from my company domain. what
> password policy would apply , the local or the company?
>
> thanks
>
> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>
>>I don't think it's possible to log into a domain with an account that's
>>'homed' on a local computer. You would need to log into the domain using
>>a
>>domain user account.
>>
>>Ken
>>
>>
>>"Pat" <nobody@nobody.com> wrote in message
>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>> can you tell me if I log in to the local domain with a local user,
>>> what password policy would apply?
>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>>>
>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>domain.
>>>>
>>>>Ken
>>>>
>>>>
>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>> in a W2K domain, I have a xp client. If I set my password policy at
>>>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>>>> on with a local user at the xp client?
>>>>
>>>
>>
>
December 3, 2004 9:02:00 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve,
do domain policies override local policies as a rule?
thanks

On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
<n9rou@n0-spam-for-me-comcast.net> wrote:

>Hi Pat.
>
>It depends what is the "effective" policy on the computer which will apply
>to local user accounts. You can open Local Security Policy to see what it
>reports noting that for Windows 2000 you need to look at the "effective"
>settings. I think if you run the "net accounts" command on the computer it
>will also display the account settings. --- Steve
>
>
>"Pat" <nobody@nobody.com> wrote in message
>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>> If I create a local user on the local domain on the local pc and logon
>> to that after logging on with a user from my company domain. what
>> password policy would apply , the local or the company?
>>
>> thanks
>>
>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>>
>>>I don't think it's possible to log into a domain with an account that's
>>>'homed' on a local computer. You would need to log into the domain using
>>>a
>>>domain user account.
>>>
>>>Ken
>>>
>>>
>>>"Pat" <nobody@nobody.com> wrote in message
>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>> can you tell me if I log in to the local domain with a local user,
>>>> what password policy would apply?
>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>
>>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>domain.
>>>>>
>>>>>Ken
>>>>>
>>>>>
>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>> in a W2K domain, I have a xp client. If I set my password policy at
>>>>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>>>>> on with a local user at the xp client?
>>>>>
>>>>
>>>
>>
>
Anonymous
December 3, 2004 8:24:05 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Yes they do unless you have moved any domain computers into another
Organizational Unit with a Group Policy defined in that OU for
password/account policy in which case the password/account policy for
computers in that OU could apply to local user accounts on those
omputers. --- Steve

"Pat" <nobody@nobody.com> wrote in message
news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
> Steve,
> do domain policies override local policies as a rule?
> thanks
>
> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
> <n9rou@n0-spam-for-me-comcast.net> wrote:
>
>>Hi Pat.
>>
>>It depends what is the "effective" policy on the computer which will apply
>>to local user accounts. You can open Local Security Policy to see what it
>>reports noting that for Windows 2000 you need to look at the "effective"
>>settings. I think if you run the "net accounts" command on the computer it
>>will also display the account settings. --- Steve
>>
>>
>>"Pat" <nobody@nobody.com> wrote in message
>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>> If I create a local user on the local domain on the local pc and logon
>>> to that after logging on with a user from my company domain. what
>>> password policy would apply , the local or the company?
>>>
>>> thanks
>>>
>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>>>
>>>>I don't think it's possible to log into a domain with an account that's
>>>>'homed' on a local computer. You would need to log into the domain
>>>>using
>>>>a
>>>>domain user account.
>>>>
>>>>Ken
>>>>
>>>>
>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>> can you tell me if I log in to the local domain with a local user,
>>>>> what password policy would apply?
>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>>
>>>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>domain.
>>>>>>
>>>>>>Ken
>>>>>>
>>>>>>
>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>> in a W2K domain, I have a xp client. If I set my password policy at
>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>>>>>> on with a local user at the xp client?
>>>>>>
>>>>>
>>>>
>>>
>>
>
December 4, 2004 3:02:52 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Ok so if I,
log on to my company domain with a company domain user, my company
domain password polciy applies.

If I then logoff and logon with a local user on the local domain, does
the company domain password policy still aplly? if so how, is it
cached on the local machine?

On Fri, 03 Dec 2004 17:24:05 GMT, "Steven L Umbach"
<n9rou@n0-spam-for-me-comcast.net> wrote:

>Yes they do unless you have moved any domain computers into another
>Organizational Unit with a Group Policy defined in that OU for
>password/account policy in which case the password/account policy for
>computers in that OU could apply to local user accounts on those
>omputers. --- Steve
>
>"Pat" <nobody@nobody.com> wrote in message
>news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
>> Steve,
>> do domain policies override local policies as a rule?
>> thanks
>>
>> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>
>>>Hi Pat.
>>>
>>>It depends what is the "effective" policy on the computer which will apply
>>>to local user accounts. You can open Local Security Policy to see what it
>>>reports noting that for Windows 2000 you need to look at the "effective"
>>>settings. I think if you run the "net accounts" command on the computer it
>>>will also display the account settings. --- Steve
>>>
>>>
>>>"Pat" <nobody@nobody.com> wrote in message
>>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>>> If I create a local user on the local domain on the local pc and logon
>>>> to that after logging on with a user from my company domain. what
>>>> password policy would apply , the local or the company?
>>>>
>>>> thanks
>>>>
>>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>
>>>>>I don't think it's possible to log into a domain with an account that's
>>>>>'homed' on a local computer. You would need to log into the domain
>>>>>using
>>>>>a
>>>>>domain user account.
>>>>>
>>>>>Ken
>>>>>
>>>>>
>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>>> can you tell me if I log in to the local domain with a local user,
>>>>>> what password policy would apply?
>>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>>>
>>>>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>>domain.
>>>>>>>
>>>>>>>Ken
>>>>>>>
>>>>>>>
>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>>> in a W2K domain, I have a xp client. If I set my password policy at
>>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I log
>>>>>>>> on with a local user at the xp client?
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Anonymous
December 4, 2004 8:15:19 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

There is no local user on the local domain but I suspect you mean local user
on a domain computer such as the built in administrator account for that
computer. Unless you have specified a different password policy for an
Organizational Unit which that domain computer resides in then the domain
password policy will apply to the local user. If it is in an OU with a
different password policy, then that password policy will apply to the local
user. The policy is not cached, it simply overrides the domain level policy
in that case for the local user logon. Normally Group/security policy is
applied in this order where the LAST defined setting applies if the setting
is defined in multiple policies. Local>site>domain>OU>child OU. --- Steve


"Pat" <nobody@nobody.com> wrote in message
news:4ar3r0dgtegb1t4ts5rcpqfab95neppv54@4ax.com...
> Ok so if I,
> log on to my company domain with a company domain user, my company
> domain password polciy applies.
>
> If I then logoff and logon with a local user on the local domain, does
> the company domain password policy still aplly? if so how, is it
> cached on the local machine?
>
> On Fri, 03 Dec 2004 17:24:05 GMT, "Steven L Umbach"
> <n9rou@n0-spam-for-me-comcast.net> wrote:
>
>>Yes they do unless you have moved any domain computers into another
>>Organizational Unit with a Group Policy defined in that OU for
>>password/account policy in which case the password/account policy for
>>computers in that OU could apply to local user accounts on those
>>omputers. --- Steve
>>
>>"Pat" <nobody@nobody.com> wrote in message
>>news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
>>> Steve,
>>> do domain policies override local policies as a rule?
>>> thanks
>>>
>>> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>
>>>>Hi Pat.
>>>>
>>>>It depends what is the "effective" policy on the computer which will
>>>>apply
>>>>to local user accounts. You can open Local Security Policy to see what
>>>>it
>>>>reports noting that for Windows 2000 you need to look at the "effective"
>>>>settings. I think if you run the "net accounts" command on the computer
>>>>it
>>>>will also display the account settings. --- Steve
>>>>
>>>>
>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>>>> If I create a local user on the local domain on the local pc and logon
>>>>> to that after logging on with a user from my company domain. what
>>>>> password policy would apply , the local or the company?
>>>>>
>>>>> thanks
>>>>>
>>>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>>
>>>>>>I don't think it's possible to log into a domain with an account
>>>>>>that's
>>>>>>'homed' on a local computer. You would need to log into the domain
>>>>>>using
>>>>>>a
>>>>>>domain user account.
>>>>>>
>>>>>>Ken
>>>>>>
>>>>>>
>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>>>> can you tell me if I log in to the local domain with a local user,
>>>>>>> what password policy would apply?
>>>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>>>domain.
>>>>>>>>
>>>>>>>>Ken
>>>>>>>>
>>>>>>>>
>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>>>> in a W2K domain, I have a xp client. If I set my password policy
>>>>>>>>> at
>>>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I
>>>>>>>>> log
>>>>>>>>> on with a local user at the xp client?
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
December 5, 2004 8:04:36 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve,
is the password policy tied to the computer or the user?
On Sat, 04 Dec 2004 17:15:19 GMT, "Steven L Umbach"
<n9rou@n0-spam-for-me-comcast.net> wrote:

>There is no local user on the local domain but I suspect you mean local user
>on a domain computer such as the built in administrator account for that
>computer. Unless you have specified a different password policy for an
>Organizational Unit which that domain computer resides in then the domain
>password policy will apply to the local user. If it is in an OU with a
>different password policy, then that password policy will apply to the local
>user. The policy is not cached, it simply overrides the domain level policy
>in that case for the local user logon. Normally Group/security policy is
>applied in this order where the LAST defined setting applies if the setting
>is defined in multiple policies. Local>site>domain>OU>child OU. --- Steve
>
>
>"Pat" <nobody@nobody.com> wrote in message
>news:4ar3r0dgtegb1t4ts5rcpqfab95neppv54@4ax.com...
>> Ok so if I,
>> log on to my company domain with a company domain user, my company
>> domain password polciy applies.
>>
>> If I then logoff and logon with a local user on the local domain, does
>> the company domain password policy still aplly? if so how, is it
>> cached on the local machine?
>>
>> On Fri, 03 Dec 2004 17:24:05 GMT, "Steven L Umbach"
>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>
>>>Yes they do unless you have moved any domain computers into another
>>>Organizational Unit with a Group Policy defined in that OU for
>>>password/account policy in which case the password/account policy for
>>>computers in that OU could apply to local user accounts on those
>>>omputers. --- Steve
>>>
>>>"Pat" <nobody@nobody.com> wrote in message
>>>news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
>>>> Steve,
>>>> do domain policies override local policies as a rule?
>>>> thanks
>>>>
>>>> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
>>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>>
>>>>>Hi Pat.
>>>>>
>>>>>It depends what is the "effective" policy on the computer which will
>>>>>apply
>>>>>to local user accounts. You can open Local Security Policy to see what
>>>>>it
>>>>>reports noting that for Windows 2000 you need to look at the "effective"
>>>>>settings. I think if you run the "net accounts" command on the computer
>>>>>it
>>>>>will also display the account settings. --- Steve
>>>>>
>>>>>
>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>>>>> If I create a local user on the local domain on the local pc and logon
>>>>>> to that after logging on with a user from my company domain. what
>>>>>> password policy would apply , the local or the company?
>>>>>>
>>>>>> thanks
>>>>>>
>>>>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com> wrote:
>>>>>>
>>>>>>>I don't think it's possible to log into a domain with an account
>>>>>>>that's
>>>>>>>'homed' on a local computer. You would need to log into the domain
>>>>>>>using
>>>>>>>a
>>>>>>>domain user account.
>>>>>>>
>>>>>>>Ken
>>>>>>>
>>>>>>>
>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>>>>> can you tell me if I log in to the local domain with a local user,
>>>>>>>> what password policy would apply?
>>>>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>>... as a follow up to what I just posted, if you have a domain, you
>>>>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>>>>domain.
>>>>>>>>>
>>>>>>>>>Ken
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>>>>> in a W2K domain, I have a xp client. If I set my password policy
>>>>>>>>>> at
>>>>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I
>>>>>>>>>> log
>>>>>>>>>> on with a local user at the xp client?
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Anonymous
December 6, 2004 3:14:01 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Password policy is part of security policy which is computer
onfiguration. --- Steve


"Pat" <nobody@nobody.com> wrote in message
news:me17r0dgtegb1t4ts5rcpqfab95neppv5p@4ax.com...
> Steve,
> is the password policy tied to the computer or the user?
> On Sat, 04 Dec 2004 17:15:19 GMT, "Steven L Umbach"
> <n9rou@n0-spam-for-me-comcast.net> wrote:
>
>>There is no local user on the local domain but I suspect you mean local
>>user
>>on a domain computer such as the built in administrator account for that
>>computer. Unless you have specified a different password policy for an
>>Organizational Unit which that domain computer resides in then the domain
>>password policy will apply to the local user. If it is in an OU with a
>>different password policy, then that password policy will apply to the
>>local
>>user. The policy is not cached, it simply overrides the domain level
>>policy
>>in that case for the local user logon. Normally Group/security policy is
>>applied in this order where the LAST defined setting applies if the
>>setting
>>is defined in multiple policies. Local>site>domain>OU>child OU. ---
>>Steve
>>
>>
>>"Pat" <nobody@nobody.com> wrote in message
>>news:4ar3r0dgtegb1t4ts5rcpqfab95neppv54@4ax.com...
>>> Ok so if I,
>>> log on to my company domain with a company domain user, my company
>>> domain password polciy applies.
>>>
>>> If I then logoff and logon with a local user on the local domain, does
>>> the company domain password policy still aplly? if so how, is it
>>> cached on the local machine?
>>>
>>> On Fri, 03 Dec 2004 17:24:05 GMT, "Steven L Umbach"
>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>
>>>>Yes they do unless you have moved any domain computers into another
>>>>Organizational Unit with a Group Policy defined in that OU for
>>>>password/account policy in which case the password/account policy for
>>>>computers in that OU could apply to local user accounts on those
>>>>omputers. --- Steve
>>>>
>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
>>>>> Steve,
>>>>> do domain policies override local policies as a rule?
>>>>> thanks
>>>>>
>>>>> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
>>>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>>>
>>>>>>Hi Pat.
>>>>>>
>>>>>>It depends what is the "effective" policy on the computer which will
>>>>>>apply
>>>>>>to local user accounts. You can open Local Security Policy to see what
>>>>>>it
>>>>>>reports noting that for Windows 2000 you need to look at the
>>>>>>"effective"
>>>>>>settings. I think if you run the "net accounts" command on the
>>>>>>computer
>>>>>>it
>>>>>>will also display the account settings. --- Steve
>>>>>>
>>>>>>
>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>>>>>> If I create a local user on the local domain on the local pc and
>>>>>>> logon
>>>>>>> to that after logging on with a user from my company domain. what
>>>>>>> password policy would apply , the local or the company?
>>>>>>>
>>>>>>> thanks
>>>>>>>
>>>>>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>>I don't think it's possible to log into a domain with an account
>>>>>>>>that's
>>>>>>>>'homed' on a local computer. You would need to log into the domain
>>>>>>>>using
>>>>>>>>a
>>>>>>>>domain user account.
>>>>>>>>
>>>>>>>>Ken
>>>>>>>>
>>>>>>>>
>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>>>>>> can you tell me if I log in to the local domain with a local user,
>>>>>>>>> what password policy would apply?
>>>>>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com>
>>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>>>... as a follow up to what I just posted, if you have a domain,
>>>>>>>>>>you
>>>>>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>>>>>domain.
>>>>>>>>>>
>>>>>>>>>>Ken
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>>>>>> in a W2K domain, I have a xp client. If I set my password policy
>>>>>>>>>>> at
>>>>>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I
>>>>>>>>>>> log
>>>>>>>>>>> on with a local user at the xp client?
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
December 6, 2004 8:27:19 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

steve thanks for all the help


On Mon, 06 Dec 2004 00:14:01 GMT, "Steven L Umbach"
<n9rou@n0-spam-for-me-comcast.net> wrote:

>Password policy is part of security policy which is computer
>onfiguration. --- Steve
>
>
>"Pat" <nobody@nobody.com> wrote in message
>news:me17r0dgtegb1t4ts5rcpqfab95neppv5p@4ax.com...
>> Steve,
>> is the password policy tied to the computer or the user?
>> On Sat, 04 Dec 2004 17:15:19 GMT, "Steven L Umbach"
>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>
>>>There is no local user on the local domain but I suspect you mean local
>>>user
>>>on a domain computer such as the built in administrator account for that
>>>computer. Unless you have specified a different password policy for an
>>>Organizational Unit which that domain computer resides in then the domain
>>>password policy will apply to the local user. If it is in an OU with a
>>>different password policy, then that password policy will apply to the
>>>local
>>>user. The policy is not cached, it simply overrides the domain level
>>>policy
>>>in that case for the local user logon. Normally Group/security policy is
>>>applied in this order where the LAST defined setting applies if the
>>>setting
>>>is defined in multiple policies. Local>site>domain>OU>child OU. ---
>>>Steve
>>>
>>>
>>>"Pat" <nobody@nobody.com> wrote in message
>>>news:4ar3r0dgtegb1t4ts5rcpqfab95neppv54@4ax.com...
>>>> Ok so if I,
>>>> log on to my company domain with a company domain user, my company
>>>> domain password polciy applies.
>>>>
>>>> If I then logoff and logon with a local user on the local domain, does
>>>> the company domain password policy still aplly? if so how, is it
>>>> cached on the local machine?
>>>>
>>>> On Fri, 03 Dec 2004 17:24:05 GMT, "Steven L Umbach"
>>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>>
>>>>>Yes they do unless you have moved any domain computers into another
>>>>>Organizational Unit with a Group Policy defined in that OU for
>>>>>password/account policy in which case the password/account policy for
>>>>>computers in that OU could apply to local user accounts on those
>>>>>omputers. --- Steve
>>>>>
>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>news:0th0r0tounkj69945o7ej82afgslutfte5@4ax.com...
>>>>>> Steve,
>>>>>> do domain policies override local policies as a rule?
>>>>>> thanks
>>>>>>
>>>>>> On Thu, 02 Dec 2004 19:29:37 GMT, "Steven L Umbach"
>>>>>> <n9rou@n0-spam-for-me-comcast.net> wrote:
>>>>>>
>>>>>>>Hi Pat.
>>>>>>>
>>>>>>>It depends what is the "effective" policy on the computer which will
>>>>>>>apply
>>>>>>>to local user accounts. You can open Local Security Policy to see what
>>>>>>>it
>>>>>>>reports noting that for Windows 2000 you need to look at the
>>>>>>>"effective"
>>>>>>>settings. I think if you run the "net accounts" command on the
>>>>>>>computer
>>>>>>>it
>>>>>>>will also display the account settings. --- Steve
>>>>>>>
>>>>>>>
>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>news:fnouq05ebr7r8e0hpqp6ojv0inm6pvhhvq@4ax.com...
>>>>>>>> If I create a local user on the local domain on the local pc and
>>>>>>>> logon
>>>>>>>> to that after logging on with a user from my company domain. what
>>>>>>>> password policy would apply , the local or the company?
>>>>>>>>
>>>>>>>> thanks
>>>>>>>>
>>>>>>>> On Thu, 2 Dec 2004 09:10:12 -0500, "Ken B" <none@microsoft.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>>I don't think it's possible to log into a domain with an account
>>>>>>>>>that's
>>>>>>>>>'homed' on a local computer. You would need to log into the domain
>>>>>>>>>using
>>>>>>>>>a
>>>>>>>>>domain user account.
>>>>>>>>>
>>>>>>>>>Ken
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>>news:a2msq0dlbfdl4esn257kjo19mklaec8tth@4ax.com...
>>>>>>>>>> can you tell me if I log in to the local domain with a local user,
>>>>>>>>>> what password policy would apply?
>>>>>>>>>> On Wed, 1 Dec 2004 11:52:50 -0500, "Ken B" <none@microsoft.com>
>>>>>>>>>> wrote:
>>>>>>>>>>
>>>>>>>>>>>... as a follow up to what I just posted, if you have a domain,
>>>>>>>>>>>you
>>>>>>>>>>>shouldn't be using local accounts--that defeats the purpose of the
>>>>>>>>>>>domain.
>>>>>>>>>>>
>>>>>>>>>>>Ken
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>"Pat" <nobody@nobody.com> wrote in message
>>>>>>>>>>>news:cgirq05g7uo9hkm73m11o2jbhjcgh7317b@4ax.com...
>>>>>>>>>>>> in a W2K domain, I have a xp client. If I set my password policy
>>>>>>>>>>>> at
>>>>>>>>>>>> the domain gpo and my local gpo, what policy gets picked up if I
>>>>>>>>>>>> log
>>>>>>>>>>>> on with a local user at the xp client?
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
!